General
- Target 2026-08-18_bb516ad315d872ad7dcb84ec4a56d6d0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260818-nlabbagg98
- SHA256 0a14dc72508b9c8fb91abdbae26a4e301f35a958748217aed122d3853f13be58
- MD5 bb516ad315d872ad7dcb84ec4a56d6d0
- SHA1 5dae91df17bb00e5f5cc27df3338fd19b6e26cc8
- SHA512 dd2b9f98a2333676e9b2d7ae95a74d1971f5b0fb04517d3c55f52f76d21311df153a04514abbd2be08e40bd59cdc6634f9a5447429e14be70b3abac229491477
- SSDEEP 196608:EP0vi/qn/R15fmmpLeHgWKLdqw5L2K+ZQIcBpT:E8v4qn/R1FtsXEj2aV
- TLSH T1EA86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-18_bb516ad315d872ad7dcb84ec4a56d6d0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_bb516ad315d872ad7dcb84ec4a56d6d0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_bb516ad315d872ad7dcb84ec4a56d6d0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 0a14dc72508b9c8fb91abdbae26a4e301f35a958748217aed122d3853f13be58
- MD5 bb516ad315d872ad7dcb84ec4a56d6d0
- SHA1 5dae91df17bb00e5f5cc27df3338fd19b6e26cc8
- SHA512 dd2b9f98a2333676e9b2d7ae95a74d1971f5b0fb04517d3c55f52f76d21311df153a04514abbd2be08e40bd59cdc6634f9a5447429e14be70b3abac229491477
- SSDEEP 196608:EP0vi/qn/R15fmmpLeHgWKLdqw5L2K+ZQIcBpT:E8v4qn/R1FtsXEj2aV
- TLSH T1EA86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE